Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0kqslpO0kn5-eczjtg7l01xyYbc.roa
File: 0kqslpO0kn5-eczjtg7l01xyYbc.roa (raw, json)
Hash identifier: Nnc/D+1q+9jTZTViPFWRYZFLZHngPcZDFmqocdoehx4=
Subject key identifier: D2:4A:AC:96:93:B4:92:7E:7E:79:CC:E3:B6:0E:E5:D3:5C:72:61:B7
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DB521ED90B9DF48D6A34AB3917D02
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0kqslpO0kn5-eczjtg7l01xyYbc.roa
Signing time: Sun 01 Jan 2023 22:04:50 +0000
ROA not before: Sun 01 Jan 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44841
IP address blocks: 87.107.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b5:21:ed:90:b9:df:48:d6:a3:4a:b3:91:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d24aac9693b4927e7e79cce3b60ee5d35c7261b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:d9:8e:51:db:f3:51:aa:e4:c5:eb:0e:e0:
8c:06:26:79:ea:16:17:73:aa:ea:d9:cb:81:6e:80:
73:65:a9:3a:ba:ec:cc:fe:48:f7:b5:2e:84:09:98:
96:d0:70:38:90:e6:ed:75:49:5d:d7:61:2f:4b:f7:
3a:5a:a8:91:89:67:5b:b1:ba:8c:88:17:70:f3:78:
24:e1:58:7a:de:18:b5:ad:cc:20:9e:f1:1b:3c:93:
f6:a8:9d:0c:01:9d:85:88:db:a2:3a:39:07:35:32:
81:b1:5a:1b:31:ed:9f:35:a8:0e:9d:74:20:33:31:
9a:dc:d2:b4:2b:d4:1e:e8:82:f4:d7:b7:4b:08:1f:
8a:42:b0:b6:c0:d5:b4:99:e0:54:ed:ac:8e:94:70:
ca:37:82:c8:e0:c6:72:4b:38:bb:a2:67:9a:23:e1:
28:05:94:24:8b:37:85:69:2e:b3:61:fb:42:ce:9b:
87:7f:d4:e5:1d:1a:8b:8e:d9:97:dc:38:a3:a4:4f:
a1:6d:0a:83:24:98:6e:94:38:84:ca:92:7c:9e:13:
0f:ac:79:b3:25:73:8f:90:e7:4f:f0:bc:24:6a:a9:
af:e9:35:91:7e:2a:e2:68:e5:59:fa:7b:1a:76:ef:
29:65:b6:92:84:14:74:2a:82:2f:b8:45:1f:09:5d:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:AC:96:93:B4:92:7E:7E:79:CC:E3:B6:0E:E5:D3:5C:72:61:B7
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0kqslpO0kn5-eczjtg7l01xyYbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.101.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:51:21:17:ee:28:4c:5b:15:74:b0:a0:3f:eb:8c:ec:3d:21:
ed:c2:0e:a9:40:67:29:34:df:a4:c4:32:b0:ba:dd:80:59:07:
5a:9c:ef:5e:8d:1a:53:c3:b4:2d:b7:57:64:1b:63:b4:e2:ac:
91:d5:cf:70:76:d0:97:06:15:d9:fb:87:84:d5:15:cb:ff:bb:
e2:f6:8a:f5:58:3d:99:8c:9e:60:9d:19:f4:24:0e:58:b0:c7:
ac:07:9e:28:cc:c9:f7:e1:c4:98:f8:7a:cb:14:cf:50:b0:1b:
bf:96:4a:f4:56:63:65:71:fd:46:07:9a:92:07:14:1f:9b:4b:
d6:df:06:84:66:9a:a4:e4:43:00:9a:cf:e6:a7:ea:bb:9b:80:
61:fb:77:3a:6a:f0:04:06:65:64:b0:13:b1:57:12:36:f7:0f:
be:3d:8b:39:76:71:18:35:fb:c6:5b:5f:57:f9:48:24:9f:8d:
03:e8:8d:9f:b1:0f:8b:2e:08:fe:d1:5c:0a:67:f5:a1:bd:5f:
7a:7d:c2:d5:84:e8:40:70:97:6d:95:76:4d:3f:0f:ab:44:4e:
3e:1e:9d:e2:7c:a1:97:03:88:1b:df:4e:70:27:b8:80:08:8d:
4c:cc:f4:cc:a4:8d:e4:c9:a8:f4:10:30:83:c5:a5:4c:23:9c:
3b:9d:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:54 2024 by rpki-client on console-ams.rpki-client.org